$ rpki-client -vvf repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft File: 1678828C849BDE3472FE846308767F54ED7F8232.mft (raw, json) Hash identifier: QHgNGVjriwZnNwErJXmFKNSL2N1j40Zo07X3LTjZNag= Subject key identifier: 73:61:4A:38:7C:F4:A6:7F:E5:77:B6:6B:B1:A3:01:A1:02:55:4E:A2 Authority key identifier: 16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 Certificate issuer: /CN=1678828C849BDE3472FE846308767F54ED7F8232 Certificate serial: 04753D327A5A7AA69E7894D0309973EBAF321891 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft Manifest number: 01ED Signing time: Tue 17 Jun 2025 22:50:46 +0000 Manifest this update: Tue 17 Jun 2025 22:45:46 +0000 Manifest next update: Sat 21 Jun 2025 07:50:46 +0000 Files and hashes: 1: 3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa (hash: L2EmD81aMJH/5FIYqmAaBN4dVwGTSb3agMBVp5kZ0Sc=) 2: 1678828C849BDE3472FE846308767F54ED7F8232.crl (hash: lIiKKnlZLcruPuq92EkMTji+WOue+PT755E4QzUCpR8=) 3: 3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa (hash: 0BWjl5P155m35iG6z4d5ofVWD1KwIdM4uWlxy+LGQA0=) 4: 3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa (hash: dHpN7ub4KrmBCyTXelnoFJDCLhoYO0X3bUz4MMj77nQ=) 5: 3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa (hash: u8WfQ7ViwC8c62RjjiP6fTb34ki+LT2D/raqeIObUTI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 07:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:75:3d:32:7a:5a:7a:a6:9e:78:94:d0:30:99:73:eb:af:32:18:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678828C849BDE3472FE846308767F54ED7F8232 Validity Not Before: Jun 17 22:45:46 2025 GMT Not After : Jun 21 07:50:46 2025 GMT Subject: CN=73614A387CF4A67FE577B66BB1A301A102554EA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4e:b0:b1:31:14:dc:01:8b:93:1d:b8:5e:b9: 33:03:d0:ff:48:9f:0a:56:50:80:b9:29:2e:9b:ea: 93:3b:36:be:4a:00:71:cb:f0:97:df:6c:02:77:2f: 4e:6b:f2:c1:86:bb:6f:d9:4b:c4:a7:2a:de:7b:f3: 77:1a:c4:03:cc:64:fc:9f:14:b7:7b:bb:40:58:bc: d9:1c:d6:26:a3:44:18:e9:c4:9b:c7:6f:38:64:35: 68:4f:e7:55:08:6a:c8:c7:a1:ef:f3:86:e2:2c:f6: 97:b7:dd:09:7b:c3:33:79:14:3e:2c:4f:02:a3:37: f7:49:05:17:ef:2e:7f:90:39:04:32:b0:22:44:f4: e9:d3:5b:6d:3d:f5:30:19:59:a3:c0:ad:a5:c8:04: ff:55:d2:8e:c0:8e:ab:94:99:e9:1e:a2:d5:c5:0d: 5b:aa:f7:e5:5f:e7:93:8e:07:92:89:35:b6:7d:51: b7:19:b8:65:eb:17:0e:e2:3b:b4:e8:39:6e:84:f2: f2:24:03:17:9c:d8:e4:8a:7d:9c:6c:ec:09:19:59: 98:35:1d:19:cf:3c:8d:cd:1d:84:72:94:76:59:e6: e5:8e:68:b6:b2:1e:b4:b7:2d:fb:30:72:78:39:9a: 14:c3:c7:43:a1:5a:9e:cb:d3:79:a1:12:59:cc:b0: 42:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:61:4A:38:7C:F4:A6:7F:E5:77:B6:6B:B1:A3:01:A1:02:55:4E:A2 X509v3 Authority Key Identifier: keyid:16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ec:64:0b:8d:80:99:39:2a:16:d0:24:cd:ce:1c:66:2a:17: d3:63:90:9c:3e:2a:ec:60:60:e6:6e:d7:d9:e8:30:4a:ee:5e: c8:5d:70:a2:9a:ea:21:4f:f3:49:a5:86:ac:7f:c0:1b:af:b7: 22:74:8b:d6:a5:79:41:6b:fd:30:6c:72:3c:d4:c4:c4:71:8b: c4:10:48:fe:a6:f6:cc:5f:2f:7c:b2:38:e1:e3:73:ad:67:63: 35:3b:2e:f3:b7:c8:cc:d3:35:fb:a0:76:d9:f9:c5:4d:06:c7: fb:a2:da:a7:c2:93:29:92:71:56:db:54:21:26:e7:3c:97:a6: 75:28:f3:ed:a5:a1:06:d3:c1:61:58:4f:c6:88:94:75:f0:0a: 52:3c:7c:fa:e1:a2:2e:ea:86:b4:6c:2a:f4:8d:e9:92:48:56: 65:86:9c:98:d4:a4:41:9a:0a:b5:1f:d3:4f:77:99:b0:c7:9f: 0f:09:91:b6:21:ad:5b:49:16:be:42:be:bf:86:5e:1f:83:78: b7:7b:03:d0:b2:f9:1c:82:0a:4d:3c:15:a7:8d:41:4c:9e:03: 71:af:cd:cf:f3:33:73:8c:01:2c:ee:ac:8c:d7:c7:f5:5f:3b: b3:83:f6:aa:cb:86:24:38:c2:16:f6:c5:e2:e6:1a:5d:8c:63: ba:28:89:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBHU9MnpaeqaeeJTQMJlz668yGJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRF RDdGODIzMjAeFw0yNTA2MTcyMjQ1NDZaFw0yNTA2MjEwNzUwNDZaMDMxMTAvBgNV BAMTKDczNjE0QTM4N0NGNEE2N0ZFNTc3QjY2QkIxQTMwMUExMDI1NTRFQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuTrCxMRTcAYuTHbheuTMD0P9I nwpWUIC5KS6b6pM7Nr5KAHHL8JffbAJ3L05r8sGGu2/ZS8SnKt5783caxAPMZPyf FLd7u0BYvNkc1iajRBjpxJvHbzhkNWhP51UIasjHoe/zhuIs9pe33Ql7wzN5FD4s TwKjN/dJBRfvLn+QOQQysCJE9OnTW2099TAZWaPAraXIBP9V0o7AjquUmekeotXF DVuq9+Vf55OOB5KJNbZ9UbcZuGXrFw7iO7ToOW6E8vIkAxec2OSKfZxs7AkZWZg1 HRnPPI3NHYRylHZZ5uWOaLayHrS3Lfswcng5mhTDx0OhWp7L03mhElnMsEIrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc2FKOHz0pn/ld7ZrsaMBoQJVTqIwHwYDVR0j BBgwFoAUFniCjISb3jRy/oRjCHZ/VO1/gjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTU3OTkxYS0xNTZkLTRiNTUtOTBjYi03OWI4NzZjZjZhNGEvMC8xNjc4ODI4Qzg0 OUJERTM0NzJGRTg0NjMwODc2N0Y1NEVEN0Y4MjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRFRDdG ODIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU1Nzk5MWEtMTU2ZC00YjU1LTkw Y2ItNzliODc2Y2Y2YTRhLzAvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdG NTRFRDdGODIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArsZAuNgJk5KhbQJM3OHGYqF9NjkJw+Kuxg YOZu19noMEruXshdcKKa6iFP80mlhqx/wBuvtyJ0i9aleUFr/TBscjzUxMRxi8QQ SP6m9sxfL3yyOOHjc61nYzU7LvO3yMzTNfugdtn5xU0Gx/ui2qfCkymScVbbVCEm 5zyXpnUo8+2loQbTwWFYT8aIlHXwClI8fPrhoi7qhrRsKvSN6ZJIVmWGnJjUpEGa CrUf0093mbDHnw8JkbYhrVtJFr5Cvr+GXh+DeLd7A9Cy+RyCCk08FaeNQUyeA3Gv zc/zM3OMASzurIzXx/VfO7OD9qrLhiQ4whb2xeLmGl2MY7ooia0= -----END CERTIFICATE-----Generated at Wed Jun 18 13:23:09 2025 by rpki-client